rank0 Goto Github PK

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2021hvv_vul

2021hvv漏洞汇总

2022-hw-poc

2022 护网行动 POC 整理

404starlink2.0-galaxy

404StarLink Project 2.0 - 推荐真正优质、有意义、有趣、坚持维护的开源项目

active-directory-pentest-notes

个人域渗透学习笔记

adduser

Programmatically create an administrative user under Windows

all-defense-tool

本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。

amass

In-depth Attack Surface Mapping and Asset Discovery

apache-solr-rce

Apache Solr Exploits 🌟

app_security

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

arl-finger-add

灯塔（最新版）指纹添加脚本！

autoscanner

输入域名>爆破子域名>扫描子域名端口>发现扫描web服务>集成报告的全流程全自动扫描器。集成oneforall、masscan、nmap、dirsearch、crawlergo、xray等工具，另支持cdn识别、网页截图、站点定位；动态识别域名并添加功能、工具超时中断等

awesome-incident-response

A curated list of tools for incident response

awvs14-scan

针对 Acunetix AWVS扫描器开发的批量扫描脚本，支持log4j漏洞专项，支持联动xray、burp、w13scan等被动批量

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bp_scripts

bp_scripts

bscan

burpbountyprofiles

BurpBounty插件的配置文件收集项目

burplog4j2scan

Burpsuite被动扫描插件

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

burpsuite_hack

一款代理扫描器

carrot

Free ChatGPT Site List 这儿为你准备了众多免费好用的ChatGPT镜像站点，当前100+站点

cas_exp

CAS 硬编码 远程代码执行漏洞

cobalt-strike-aggressor-scripts

Cobalt Strike Aggressor 插件包

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

conote-community

Conote 综合安全测试平台社区版。

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

csagent

CobaltStrike 4.x通用白嫖及汉化加载器